$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft File: dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft (raw, json) Hash identifier: Twxg5QotAG5Pxw4xeehmhQI4PzvVvN58Mo5KArppZNM= Subject key identifier: A3:46:9D:9D:CE:2F:E4:3C:CE:6A:BF:40:EF:4C:48:F6:E9:F6:F2:D6 Authority key identifier: 75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 Certificate issuer: /CN=A91FC705/serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Certificate serial: 0535 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft Manifest number: 0535 Signing time: Fri 30 May 2025 23:40:03 +0000 Manifest this update: Fri 30 May 2025 23:40:03 +0000 Manifest next update: Fri 06 Jun 2025 23:40:03 +0000 Files and hashes: 1: dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl (hash: /KFTX7FhvsZyD0iXhX7UeCYZuVGmUyQAqi0Iv+kZNe8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1333 (0x535) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC705, serialNumber=75F772E406C5F46D3E8BF27AC1F25FCF64E97997 Validity Not Before: May 30 23:40:03 2025 GMT Not After : Jun 6 23:40:03 2025 GMT Subject: CN=683a41d3-17a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:9f:01:61:49:77:07:20:58:d0:5e:3f:be: 95:78:29:49:ba:58:5f:fb:fc:1d:1c:b8:9f:ab:6d: 78:4c:68:ae:d1:65:62:38:7d:17:3c:19:6b:48:eb: d1:bc:34:bc:8f:4c:58:9e:fc:1d:b5:2c:da:a0:52: 67:53:5f:ed:56:db:41:f3:c0:75:88:d2:f0:df:87: 65:9b:0a:ea:cd:45:27:fc:ac:8d:f4:7e:ad:06:38: e2:91:fc:a8:28:2b:e3:11:cd:e2:df:d6:58:30:28: 36:de:0f:87:f7:c9:e5:73:d3:8c:11:f2:de:66:17: 3b:84:29:be:fd:cd:c3:cd:06:97:6f:79:6e:37:c7: 47:d5:85:74:5d:de:7d:e9:13:59:69:e5:54:58:37: 95:93:c5:c9:12:c3:10:24:37:d6:e2:6d:a1:cf:97: 57:d1:b5:08:47:e9:a9:d5:b7:71:6a:a5:1e:a4:39: 7a:49:8b:c3:ec:0e:8e:2a:22:7a:c0:ec:90:75:66: 6a:41:54:9b:9a:98:ef:8d:ec:68:05:1a:3d:c4:f1: 7b:4c:ad:93:a0:93:28:71:bb:26:88:b6:f4:02:f0: d2:c1:bf:66:f6:f8:81:dd:6f:c9:33:ad:49:14:0c: 31:9f:b4:10:87:38:7f:e3:f5:94:6f:d4:44:67:80: 2f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:46:9D:9D:CE:2F:E4:3C:CE:6A:BF:40:EF:4C:48:F6:E9:F6:F2:D6 X509v3 Authority Key Identifier: keyid:75:F7:72:E4:06:C5:F4:6D:3E:8B:F2:7A:C1:F2:5F:CF:64:E9:79:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dfdy5AbF9G0-i_J6wfJfz2TpeZc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC705/6E277BB2F5BD11EBB9F8DB11C4F9AE02/dfdy5AbF9G0-i_J6wfJfz2TpeZc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:e6:85:b0:89:1a:3f:2e:9e:69:cb:89:68:14:d8:8a:de:44: 10:2b:96:e3:00:c8:7e:83:d9:cb:db:5b:83:e0:80:0c:c6:80: 5a:8c:1b:63:52:5a:a9:01:15:d6:93:93:d4:ec:c9:80:b0:44: d5:d8:d0:c9:03:eb:d2:18:9b:90:ce:c8:4d:4f:5d:bf:08:21: 02:a6:e1:fe:f7:1b:f5:d6:1f:2b:2d:43:e0:2e:45:c8:97:28: db:d0:2c:f9:6a:39:92:ec:ff:0d:ce:28:6a:f2:27:3c:4a:fb: d2:48:39:2f:56:51:3e:7c:38:40:6f:4d:d6:64:f0:b4:2b:07: c5:0a:55:ed:5c:93:ba:e2:7f:63:3d:cc:42:88:a1:dc:31:7a: 2d:42:a1:af:1a:ef:81:91:3a:d9:c0:66:c6:ab:83:45:fa:c8: c0:92:4a:b4:e1:ab:db:2d:6b:81:c2:dc:19:2b:9e:3c:cf:55: 64:cc:8c:1b:05:66:ed:4a:1a:80:25:f9:4a:0c:f2:09:b1:4b: 00:37:e1:18:06:1f:d8:bf:02:f3:61:ca:fe:fe:54:2c:63:55: d7:b4:42:04:08:b6:3c:64:d3:b1:ab:98:a0:e8:ce:9d:8d:97: 11:22:47:08:28:48:66:f0:65:58:f6:f7:8b:30:a7:77:ea:32: 53:2e:b3:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBTUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3MDUxMTAvBgNVBAUTKDc1Rjc3MkU0MDZDNUY0NkQzRThCRjI3QUMxRjI1RkNG NjRFOTc5OTcwHhcNMjUwNTMwMjM0MDAzWhcNMjUwNjA2MjM0MDAzWjAYMRYwFAYD VQQDEw02ODNhNDFkMy0xN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6bKfAWFJdwcgWNBeP76VeClJulhf+/wdHLifq214TGiu0WViOH0XPBlrSOvR vDS8j0xYnvwdtSzaoFJnU1/tVttB88B1iNLw34dlmwrqzUUn/KyN9H6tBjjikfyo KCvjEc3i39ZYMCg23g+H98nlc9OMEfLeZhc7hCm+/c3DzQaXb3luN8dH1YV0Xd59 6RNZaeVUWDeVk8XJEsMQJDfW4m2hz5dX0bUIR+mp1bdxaqUepDl6SYvD7A6OKiJ6 wOyQdWZqQVSbmpjvjexoBRo9xPF7TK2ToJMocbsmiLb0AvDSwb9m9viB3W/JM61J FAwxn7QQhzh/4/WUb9REZ4AvcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKNGnZ3O L+Q8zmq/QO9MSPbp9vLWMB8GA1UdIwQYMBaAFHX3cuQGxfRtPovyesHyX89k6XmX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzcwNS82RTI3N0JCMkY1 QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlHMC1pX0o2d2ZKZnoyVHBl WmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RmZHk1QWJGOUcwLWlfSjZ3ZkpmejJUcGVaYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzcwNS82RTI3N0JCMkY1QkQxMUVCQjlGOERCMTFDNEY5QUUwMi9kZmR5NUFiRjlH MC1pX0o2d2ZKZnoyVHBlWmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAn5oWwiRo/Lp5py4loFNiK3kQQK5bjAMh+g9nL21uD4IAMxoBajBtj UlqpARXWk5PU7MmAsETV2NDJA+vSGJuQzshNT12/CCECpuH+9xv11h8rLUPgLkXI lyjb0Cz5ajmS7P8Nzihq8ic8SvvSSDkvVlE+fDhAb03WZPC0KwfFClXtXJO64n9j PcxCiKHcMXotQqGvGu+BkTrZwGbGq4NF+sjAkkq04avbLWuBwtwZK548z1VkzIwb BWbtShqAJflKDPIJsUsAN+EYBh/YvwLzYcr+/lQsY1XXtEIECLY8ZNOxq5ig6M6d jZcRIkcIKEhm8GVY9veLMKd36jJTLrOX -----END CERTIFICATE-----Generated at Sat May 31 17:48:46 2025 by rpki-client